This article is used in the event you need to disable the monitoring of Docker containers.
Data Center Security Advanced for Linux Agents 6.8 +
Steps to disable Docker monitoring:
Path: /opt/Symantec/sdcssagent/IDS/system
Filename: LocalAgent.ini
Navigate to the LocalAgent.ini file located in the following directory:
/opt/Symantec/sdcssagent/IDS/system/
1. Uncomment Enabled Container Monitor and setting the value to 0
#Enable Container Monitor=1 # Monitor Docker Containers
2. Add a line, Enable Docker Monitor=0
Enable Docker Monitor=0
3. Reboot the system (init 6)
After system is back up, confirm LocalAgent.ini has both settings